Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919202C/2DC8924E21FB11F18258E26D2F3D8C67/87TgHnx3HLQliWfWZ_92HsnqOtg.mft
File:                     87TgHnx3HLQliWfWZ_92HsnqOtg.mft (raw, json)
Hash identifier:          fiSWrbwGywwGj7+OYET867eXMqiwLNKZVnWFulxwuPs=
Subject key identifier:   39:16:05:62:03:DC:5B:88:A4:CE:0D:13:F5:9B:6F:DA:FA:13:24:1B
Authority key identifier: F3:B4:E0:1E:7C:77:1C:B4:25:89:67:D6:67:FF:76:1E:C9:EA:3A:D8
Certificate issuer:       /CN=A919202C/serialNumber=F3B4E01E7C771CB4258967D667FF761EC9EA3AD8
Certificate serial:       22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/87TgHnx3HLQliWfWZ_92HsnqOtg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919202C/2DC8924E21FB11F18258E26D2F3D8C67/87TgHnx3HLQliWfWZ_92HsnqOtg.mft
Manifest number:          20
Signing time:             Mon 11 May 2026 09:04:50 +0000
Manifest this update:     Mon 11 May 2026 09:04:50 +0000
Manifest next update:     Mon 18 May 2026 09:04:50 +0000
Files and hashes:         1: 87TgHnx3HLQliWfWZ_92HsnqOtg.crl (hash: WV36AiJ6cb/Kl3hHFJXdFlNELncRcMmB6r8qTrzn2X8=)
                          2: 174BE768220111F196E3A71D323D8C67.roa (hash: DBc9eTzf4xtWxoUymp2lg1GqMjjg2PXot2nvZeab/bw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919202C/2DC8924E21FB11F18258E26D2F3D8C67/87TgHnx3HLQliWfWZ_92HsnqOtg.crl
                          rsync://rpki.apnic.net/member_repository/A919202C/2DC8924E21FB11F18258E26D2F3D8C67/87TgHnx3HLQliWfWZ_92HsnqOtg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/87TgHnx3HLQliWfWZ_92HsnqOtg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:04:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919202C, serialNumber=F3B4E01E7C771CB4258967D667FF761EC9EA3AD8
        Validity
            Not Before: May 11 09:04:50 2026 GMT
            Not After : May 18 09:04:50 2026 GMT
        Subject: CN=6a019bb2-02a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:21:91:5b:50:aa:7e:83:d7:d0:aa:77:c0:37:
                    b2:4a:eb:80:7e:cc:b6:36:b9:c8:68:18:54:a9:7b:
                    1e:dd:cf:40:fb:cd:10:5b:40:4d:f4:66:a5:25:10:
                    5b:e3:97:b0:61:64:7f:46:03:53:02:4f:cc:18:89:
                    5c:33:76:e7:a2:df:0b:46:45:b6:09:7b:8d:dc:0a:
                    14:88:19:fa:9a:37:71:4d:42:a3:6e:8b:d8:90:76:
                    48:cc:39:a6:9b:90:d9:77:37:5c:c2:cf:96:52:36:
                    09:31:27:d5:c4:29:99:03:fe:f3:52:18:23:55:bd:
                    18:6d:8d:ea:a5:71:f0:82:0b:65:60:cc:3a:b2:bf:
                    8a:de:5d:77:9f:80:b1:b5:f4:cc:c3:b2:d8:42:45:
                    26:3c:df:2d:77:21:89:5f:91:64:5a:b3:d0:08:ce:
                    77:9c:7b:2f:ef:d5:e7:55:dd:94:29:bb:73:2a:81:
                    72:c7:6f:76:53:b4:03:0a:64:98:73:e9:96:ca:a6:
                    4f:42:bb:f1:c4:2b:c0:fa:3d:81:2b:2e:99:8e:f9:
                    0d:9c:2c:35:aa:b0:c0:d8:f8:27:89:d8:67:bc:e2:
                    79:fa:fe:08:54:1a:64:de:18:6a:de:a4:c9:63:48:
                    34:99:28:d9:b1:b9:19:15:61:84:78:69:60:a0:32:
                    76:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:16:05:62:03:DC:5B:88:A4:CE:0D:13:F5:9B:6F:DA:FA:13:24:1B
            X509v3 Authority Key Identifier:
                keyid:F3:B4:E0:1E:7C:77:1C:B4:25:89:67:D6:67:FF:76:1E:C9:EA:3A:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919202C/2DC8924E21FB11F18258E26D2F3D8C67/87TgHnx3HLQliWfWZ_92HsnqOtg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/87TgHnx3HLQliWfWZ_92HsnqOtg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919202C/2DC8924E21FB11F18258E26D2F3D8C67/87TgHnx3HLQliWfWZ_92HsnqOtg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:5a:d3:49:6c:6a:b9:e8:77:62:d1:8f:4c:a4:5d:d3:be:be:
         95:02:b0:1e:e9:a0:c7:9a:18:cb:b7:66:11:4b:f0:11:9a:c8:
         e3:04:6f:b0:d7:0f:78:6e:b6:11:cf:9c:20:4e:8f:e5:a1:d0:
         a5:6c:3d:d7:b2:44:a3:81:b6:d5:08:82:a3:b7:05:7d:1c:7e:
         9a:3a:d9:8a:0b:ec:a2:ef:03:d0:e0:7f:55:ee:39:9a:6c:96:
         8d:cc:0c:6b:5f:08:ea:ed:f4:ea:ec:36:39:f8:f9:8c:08:69:
         ad:ae:ca:c1:55:2f:1d:7b:80:3d:42:42:4d:9a:ff:cf:6b:c7:
         73:93:5f:1b:f7:54:4f:a9:87:4f:a9:32:f6:25:20:1c:39:b7:
         82:26:9e:db:33:df:30:95:dd:f6:90:b8:82:f3:2e:c2:7d:69:
         f7:43:81:02:34:b6:e1:fe:b2:3a:23:da:a0:12:06:fb:7d:48:
         be:e7:ae:a6:0b:d0:b9:4c:16:b5:d9:fb:a8:54:c6:6c:f2:6a:
         d4:04:c2:d2:e5:48:a5:60:51:30:df:06:93:d1:58:ce:92:ff:
         74:1f:cd:e9:72:c0:79:27:19:2c:94:28:e7:db:df:e8:97:ea:
         61:41:f2:f8:1e:44:53:b6:25:09:0a:72:16:55:02:fc:f4:6c:
         24:c9:22:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:05:31 2026 by rpki-client